Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Improper access control in user and role restore API endpoints in Devolutions Server 2025.3.11.0 and earlier allows a low-privileged authenticated user to restore deleted users and roles via crafted API requests.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-03-09 | 2 | Disclosure1General1 |
| 2026-03-10 | 1 | Disclosure1 |
CVE-2026-3638 Improper Access Control in Devolutions Server API Enables Unauthorized User Restoration https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-3638
Post summary
The entry announces CVE-2026-3638, describing an improper access control bug in the Devolutions Server API that allows unauthorized user restoration, but provides no further technical or mitigation details.
CVE-2026-3638 Improper access control in user and role restore API endpoints in Devolutions Server 2025.3.11.0 and earlier allows a low-privileged authenticated user to restore delet… https://www.cve.org/CVERecord?id=CVE-2026-3638
Post summary
The text announces CVE-2026-3638 in Devolutions Server, noting an improper access control flaw that lets low‑privileged users restore deleted entities via API endpoints.
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-3638 - Devolutions Server Access Control Vulnerability Intel Report: https://ift.tt/R7oL31c
Post summary
The tweet alerts to CVE-2026‑3638, a devolutions server access‑control flaw, but offers no PoC, exploit, active attack evidence, patch advice, or false‑positive claim, and only minimal technical description.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | devolutions | devolutions_server | - | - | - |